Skip to content

I cant find the java.naming.xxx class in codeql #2954

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ox1234 opened this issue Mar 2, 2020 · 5 comments
Open

I cant find the java.naming.xxx class in codeql #2954

ox1234 opened this issue Mar 2, 2020 · 5 comments
Labels
question Further information is requested

Comments

@ox1234
Copy link

ox1234 commented Mar 2, 2020

here is my code, i want to get the javax.naming.xxx classes, such as InitialContext

from Class asdf, string pack
where pack = asdf.getQualifiedName() and exists(pack.indexOf("javax.naming"))
select pack,asdf

but after run, only four result
image

@ox1234 ox1234 added the question Further information is requested label Mar 2, 2020
@aschackmull
Copy link
Contributor

Are you using InitialContext in your code? Otherwise it likely won't be part of the database.

@ox1234
Copy link
Author

ox1234 commented Mar 2, 2020

I also find that InitialContext is not in my code, but I want to analyze the whole jdk classes and the source code classes, and some jdk classes are not used in the source, is it possible?

@ox1234
Copy link
Author

ox1234 commented Mar 2, 2020

Are you using InitialContext in your code? Otherwise it likely won't be part of the database.

In fact, I want to do some vulnerability research, I need to search the entire jdk classes, not only the source code used classes

@aschackmull
Copy link
Contributor

In that case you'll want a database of the jdk itself. Let me see if I can find that for you.

@aschackmull
Copy link
Contributor

Still working on this. The problem is that our old infrastructure for making such databases available is currently being decommissioned, and the new infrastructure is in the process of being set up but still pending an approval from legal.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants